Skip to content
Cyberattack Compromises User Data at Norway's Norad Agency

Cyberattack Compromises User Data at Norway's Norad Agency

First seen 5 Nov 2026, 15:16 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 5, 2026 at 15:17 UTC
  • •20,614 users' data potentially compromised in Norad's Grants Portal breach.
  • •Attackers accessed the portal using 27 compromised user accounts.
  • •Norad is collaborating with cybersecurity experts to assess the breach's impact.

Norad, Norway's development aid agency, reported a cyberattack that may have exposed the names and email addresses of 20,614 users registered on its Grants Portal. The breach was discovered on October 30, 2026, when attackers accessed the portal using 27 compromised user accounts. In addition to user data, information related to grant applications from at least three organizations outside Norway was also extracted. Norad has closed the portal and is working with external cybersecurity experts to assess the full impact of the attack. The agency has notified the Norwegian Data Protection Authority and the police, and it is in the process of informing affected users. The Norwegian National Security Authority confirmed that the attack shares characteristics with other recent cyberattacks, but no specific details about the attackers have been disclosed.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-10-30
Cyberattack discovered
Norad detected unauthorized access to its Grants Portal via 27 compromised accounts.
Helpnetsecurity
2026-11-01
User notifications initiated
Norad began notifying affected users and organizations about the data breach.
Helpnetsecurity
2026-11-05
Public disclosure of breach
Norad publicly announced the cyberattack and its potential impact on user data.
www.norad.no

More articles in this cluster (2)

Following this threat?

Track Norad in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 4

Common questions

Who is affected by the breach?
The breach potentially affects all 20,614 registered users of Norad's Grants Portal.
What information was compromised?
The attackers may have accessed names, email addresses, and grant application details from at least three organizations.
What steps is Norad taking in response?
Norad has closed the Grants Portal, engaged cybersecurity experts, and is notifying affected users and authorities.